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Principles for the design and stability of a spacecraft on-orbit attitude control system 
employing on-off Reaction Control System (RCS) thrusters is presented. Both the vehicle 
dynamics and the control system actuators are inherently nonlinear, hence traditional linear 
control system design approaches are not directly applicable. This paper has three main 
aspects: It summarizes key RCS control System design principles from the Space Shuttle and 
Space Station programs, it demonstrates a new approach to develop a linear model of a phase 
plane control system using describing functions, and applies each of these to the initial 
development of the NASA’s next generation of upper stage vehicles. Topics addressed include 
thruster hardware specifications, phase plane design and stability, jet selection approaches, 
filter design metrics, and automaneuver logic. 


Nomenclature 

Ji = Principal Moment of Inertia about X axis (slug-ft 2 ) 

J 2 = Principal Moment of Inertia about Y axis (slug-ft 2 ) 

J3 = Principal Moment of Inertia about Z axis (slug-ft 2 ) 

J = Inertia Tensor (slug-ft 2 ) 

coi = Inertial body rate about X axis (rad/sec) 

a >2 = Inertial body rate about Y axis (rad/sec) 

C 03 = Inertial body rate about Z axis (rad/sec) 

a ) = Body rate vector with respect to inertial frame (rad/sec) 

T iext = External disturbance torque on X body axis (ft-lb) 

T 2 ext = External disturbance torque on Y body axis (ft-lb) 

T 3 ext = External disturbance torque on Z body axis (ft-lb) 

T ext = External disturbance torque vector in body axes (ft-lb) 

T c = Control torque vector in body axes (ft-lb) 

ui = Control torque on X body axis (ft-lb) 

U 2 = Control torque on Y body axis (ft-lb) 

U 3 = Control torque on Z body axis (ft-lb) 
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Aw = Quaternion from Inertial to Body Frame (unitless) 

(p - Eigen angle from inertial frame to body frame (rad) 
a - Eigen axis from inertial frame to body frame (unitless) 

77 = Scalar portion of quaternion Aw (unitless ) 

S = Vector portion of quaternion Aw (unitless) 

8 = Phase plane attitude deadband (rad) 

8h = Phase plane attitude deadband hysteresis (rad) 

RL = Phase plane rate limit (rad/sec ) 

t = Rate gain representation for phase plane, t= 8/RL (sec ) 

Ae = Quaternion from current attitude to desired attitude (unitless) 

(f) e = Eigen angle from current attitude to desired attitude (rad) 
a e = Eigen axis from current attitude to desired attitude (unitless) 

(j) e = Attitude error (rad) 

co e = Rate error (rad/sec) 

<j) = Vehicle attitude angle in single axis formulation (rad) 

(j) = Vehicle attitude rate in single axis formulation (rad/s) 

6 r = Rigid body phase margin (deg) 

a c = Control acceleration (rad/sec 2 ) 

N(A ) = Describing Function with input amplitude A (units vary) 

= Current phase plane output command (unitless) 

Tf = Updated phase plane output command (unitless) 

Td = System latency (sec) 

TV = Allowable filter lag (sec) 

A = Intermediate describing function variable (unitless) 

A = Intermediate describing function variable (unitless) 

Ajets = Matrix whose columns are the jet acceleration vectors (deg/sec 2 ) 
b = Column vector of commanded body rates (deg/sec) 

x = Column vector of commanded jet on times (sec) 

P = Cost function to minimize propellant to achieve a rate command (lbs) 

c = Row vector of thruster flow rates for each thruster (lbs/sec) 

atm = Desired maneuver rate magnitude (deg/sec) 

I. Introduction 

The use of on-off Reaction Control System (RCS) thrusters for on-orbit attitude control is a well-uitilized and 
well-proven approach. The vehicle rigid body dynamics and the discontinuous on-off thrusters provide a nonlinear 
plant and nonlinear control system, respectively, making traditional linear design approaches generally unavailable. 
Advances in design and certification were made with the extensive use of RCS control in Space Shuttle and 
International Space Station (ISS) programs. In particular advancements were made with the filter design and 
certification of RCS control in the presence of low frequency flex-body dynamics found in plants such as the shuttle 
docked to the International Space Station. 


II. Vehicle Dynamics and Phase Plane Control 

The rotational equations of motion and kinematics for a spacecraft principal axes in inertial space, are 1 : 
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Where and Aw are the principal axis angular velocities and attitude quaternion, respectively. The latter is 
defined by the eigen axis a and eigen angle cp. The vectors J and u are principal moments of inertia and external 
control torque, respectively. 

With an axis of symmetry (/ 2 =/i) and ignoring external and control torques, the dynamics simplify to “torque- 
free” equations: 

J x co x = 0 

J 3 d> 2 = (. J 3 - J x )cO\(d 3 ( 2 ) 

J 3^3 — — J 3 )^i CD 2 


and a closed-from solution to the body rate time history can be derived in the absence of external torque (i.e. 
“coasting”): 
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Where the “0” denotes the initial conditions. It is noted that the frequency content of the coasting motion is 
determined by the inertia ratio and the initial roll rate. 

Control for on-off constant force thruster systems generally involves a “deadzone” to avoid constant thruster 
chattering, and the deadzone is commonly implemented in the form of a phase plane control system 2 . Given an error 
quaternion A e and a rotational rate error vector, the phase plane literally plots attitude error 0 e per axis against attitude 
rate error co e per axis, and creates a ‘deadzone’ around the commanded attitude state where no control action is taken. 
Here, the allowable attitude error is called the ‘deadband’, and the allowable rate error is typically called the ‘Rate 
Limit (RL). These parameters are shown in Figure 1, where a phase plane is, in its simplest form, defined by linear 
switching lines. These switching lines are a linear combination of the attitude and rate errors, and when the attitude 
state is outside of these switching lines, the thrusters are commanded on. 
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Simple Phase Plane 



Figure 1. Simple Phase Plane with Deadzone Nomenclature 


Also typically added are Hysteresis switching lines, where additional switching lines are added to minimize 
thruster on-off chattering. This simple control law, specifically using linear switching lines with hysteresis, is 
commonly called a Schmitt Trigger 2 , shown in Figures 2 and 3. 



Figure 2. Simple Phase Plane with Hysteresis (Schmitt Trigger) 
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v c (t) 



Figure 3. Phase Plane with Hysteresis input vs output (Schmitt Trigger) 

Bryson (Reference 2) provided the resulting limit cycle amplitude and period when in the absence of external 
disturbance torques (equation 4). 


D . , 4S 
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Typically “drift channels” are added to the design to minimize peak rates during control, hence will reduce 
propellant usage. These drift channels reflect a compromise between a minimum time solution and propellant savings 
when dealing with high rotational rates. A phase plane design using both drift channels and hysteresis is shown in 
Figure 4. This design was employed for the Reaction Control System for the Ares 1/I-X launch vehicles. In this 
design, the hysteresis for the drift channel is defined at its center. 


Ares/Ares IX Phase Plane 



Figure 4. Ares I/Ares I-X Phase Plane 


Using Disturbance Estimate in Phase Plane Switching Line Definition 
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For configurations where vehicle external disturbances are large relative to control authority, and/or where 
thruster duty cycles are a concern, it may be beneficial to estimate vehicle disturbance acceleration and use this 
estimate in the definition of the phase plane switching line 3 . This logic was employed in the Apollo 4 and Space Shuttle 
orbiter phase plane, where the switching lines are parabolic reflecting the effective control authority given disturbance. 
The hysteresis line, shown in green in Figure 5, works to establish a phase plane limit cycles with a magnitude of Vi 
of the commanded deadband. A risk of using disturbance estimation in the phase plane definition is that poor phase 
plane limit cycle performance can accompany poor disturbance estimation, where, for example on Space Shuttle Flight 
STS-71, the first flight where the shuttle docked to the Russian MIR, Shuttle RCS self-impingement on the Shuttle 
structure led to an inaccurate estimation of high external vehicle disturbance, significantly increasing propellant 
consumption 5 . 


Shuttle Orbiter Phase Plane 



Figure 5. Space Shuttle Phase Plane 


Partial Commands for State Errors inside Deadzone 


Space Shuttle phase plane design would allow the phase plane algorithm to issue partial commands (a command 
with magnitude greater than zero but less than one) provided at least one axis is outside the deadzone 6 in an off-axis. 
This partial command logic allows the resulting thruster acceleration to correct smaller errors, even while inside the 
deadzone, while correcting a difference axis. For example, if the rate error has a magnitude of half the rate limit, then 
the partial command could be 0.5. This increase in complexity is likely more useful with configurations where 
uncoupled single axis accelerations are not generally available (say with diverse mass properties or non-orthogonal 
thruster configurations). 

Software Coding of Phase Plane Algorithms 

Note when developing phase plane software, it is common to take advantage of the phase plane symmetry when 
developing code, as shown for the Space Shuttle Flight Software as shown in Figure 6 taken from Shuttle Software 
Requirements 6 . 
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Figure 6. Symmetry of Phase Plane for Software Development used to produce Phase Plane 
Rotational Jet Command (RJC) 

The above phase plane designs represent a basic architecture for a control law employing on-off thrusters. More 
complex pulse width modulation approaches are available as well, for example see Reference 7. The phase plane 
control law, however, is nonlinear, hence stability analyses of the system must employ nonlinear control system 
analysis approaches (see section IV). 


III. Phase Plane Stability and Filter Design 

It is necessary for flight vehicle certification to demonstrate stability of the system/vehicle dynamics and 
disturbances such as environmental torques, flex/slosh dynamics, and system latencies. Typical stability margin 
definitions are shown in Figure 7, with typical design standards (in this case Space Shuttle values 9 ) shown in Table 1. 
Note with nonlinear phase plane control, these linear-based margin definitions are not directly applicable. 
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Figure 6. Typical Stability Margin Definitions 


Parameter 

Condition 

Nominal 

Dispersed 

Rigid Body GM (dB) 

6 

3 

Rigid Body PM (deg) 

30 

20 

Slosh PM (deg) 

25 

15 

Slosh GM (dB) 

6 

3 

Flex Mode Attenuation (dB) 

10 

6 


Table 1. Typical Phase Margin Design Criteria (taken from Space Shuttle, Reference 8) 


Given the nonlinearity of the phase plane, or any other related formulation employing the necessary deadzone, 
analysis and stability margin computations will fall within the category of either performing nonlinear analysis of the 
nonlinear system, or developing a linear approximation of the nonlinear components. The former, using nonlinear 
analysis approaches, generally involves formulating the problem with the nonlinear components separated from the 
linear portion of the plant (say as with the Lure formulation), then using sufficient conditions like associated with the 
Circle Criterion 10 or Describing Functions 11 . In the latter, performing a nonlinear analysis using Describing Functions 
(DF), it involves the prediction of any flex-induced limit cycle by comparing the nonlinear Describing Function with 
the Linear Plant. In this case, the existence of a sustained flex-induced limit cycle is considered instability 11 . 
Alternatively, one can develop a linear approximation of the nonlinear phase plane component, which allows 
traditional control theory linear analysis. Two approaches of linearization is using Pulse Width Modulation (PWM) 
such as used in the International Space Station (ISS) design 12 , or describing functions. In this paper we concentrate 
on the latter approach. Good coloration between the stability results of these various analysis approaches has been 
demonstrated 13 . 

A simplified phase plane control system model 10 is shown in Figure 8, shown here as a single axis regulator problem 
(commanded attitude and rates =0). For a given input command (TO, the jet select represents the algorithm used to 
choose which thrusters to fire to accommodate the rotational command, supplying vehicle acceleration. Jet Selection 
may be table-lookup or a more complex scheme as discussed in section IV. The plant contains rigid, flex, and slosh 
dynamics in response to the thruster acceleration input. Sensor dynamics contains the frequency response of the sensor 
hardware, including internal anti-aliasing filtering. The flex filter block consists of a set of filtering, low pass in 
nature, to attenuate high-frequency dynamics and noise while at the same time allowing low-frequency dynamics to 
feedback into the controller. System latency includes transport lags as well as latencies associated with digital 
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algorithm execution. The phase plane control system generates a rotational command using attitude error and rate 
error input, employing a deadzone to minimize propellant. The phase plane design may include hysteresis, drift 
channels, etc., to further regulate propellant usage and thruster duty cycles. The phase plane controller is a nonlinear 
component, which leads to the use of nonlinear analysis approaches to stability determination. The phase plane 
autopilot produces a single command per axis that takes, in its simplest form, one of three options; 0 for drift (the error 
state is inside the deadzone) +1 for positive rotation and -1 for negative rotation. This command is sent to a jet 
selection logic that determines the thrusters to best achieve the command, completing the loop. The phase plane 
design is generally dictated by performance considerations (for example “tight” control may be needed to support 
vehicle separation operations), while the key design challenge is the development of the flex filtering (software) to 
ensure stability, both rigid body and in the presence of disturbances such a vehicle flexure. 



Nonlinear 
Phase Plane 


Figure 8. Phase Plane Control System Model with Phase Plane Nonlinearity 


As mentioned previously, two approaches to analysis system stability with the nonlinear phase plane component 
is to either separate the nonlinear from the system and use nonlinear analysis approaches such as describing functions 
or Circle/Popov Criterion, or use approaches to develop a linear approximation of the nonlinear system by using PWM 
or Describing Functions. This paper will examine the latter (developing a linear approximation of the nonlinear 
system) using describing functions. 

To use describing functions to develop a linear representation of this nonlinear phase plane controller, we will first 
transform the phase plane controller into a equivalent Proportional Derivative (PD) system followed by an ideal relay, 
as supplied by Jang in Reference 10. For simplicity we will remove the sensor dynamics (generally having high 
frequency bandwidth) and the jet select from Figure 8, resulting in: 



Nonlinear 
Phase Plane 


Figure 9. Simplified Phase Plane Control System Model with Phase Plane Nonlinearity 


The PD control law is based on the inverse slope of the switching line ( r=S/RL ), consistent with Schmitt Trigger 
definition 2 . This representation allows the deadzone to be modeled as an ideal relay 10 : 
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Phase Plane as Phase Plane 

PD Control as Relay 


Figure 10. Simplified Phase Plane Control System with Phase Plane Modeled as PD/Relay Combination 

We will literally replace the ideal relay in Figure 10 with a describing function to linearize the system. The 
describing function for an ideal relay is 14 : 


/v(a) = 0 


x 4 

r 8' 

) = — J 1 ' 


nA \ 

V Ay 


A <8 
A >8 


(5) 


In the above, the describing function is a nonlinear loop-gain representation of the phase plane. At this point this 
representation is still a nonlinear function since the loop gain is dependent of the input magnitude. Physically, the 
amplitude A represents the magnitude of the attitude state error with respect to the deadband ( S ). When A is less than 
S, there is no control, and hence the loop gain is zero. When A is greater than 8, the thrusters will fire, and the 
equivalent loop gain is a function of the error input A magnitude. To complete the linearization of this system, a value 
of A must be chosen, and we choose the value (A*) to maximize the value of the loop gain (describing function). 
Maximizing the loop gain represents the peak response of the thrusters to state error, as well as maximize the gain on 
the flex dynamics amplitude (hence conservative). The peak value of a describing function for an ideal relay occurs 
when: 


A* =428 N(A*)= — 

7lS 


Hence the linear representation of the phase plane system becomes: 



Phase Plane as Phase Plane 

PD Control as DF 


Figure 11. Simplified Phase Plane Control System with Phase Plane Modeled as PD/Relay Combination 


One advantage of using a describing function for phase plane representation is that hysteresis can be modeled by 
using the appropriate describing function. For example, the describing function representing the hysteresis shown in 
Figure 2 is below 14 . To utilize this describing function in a block diagram to represent a phase plane, again find the 
value of A which maximizes N(A ). 
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Phase Plane Rigid Body Stability Analysis 

To show application of the phase plane model linearized with the use of a describing function, we take the example 
of rigid body control, bending filters removed, and ideal latency (7b), using the same value in both the attitude and 
rate channels. This simplified system is shown in Figure 12 where it is noted the equivalent proportional and rate 
gains for the phase plane are inversely proportional to the attitude deadband and rate limit, respectively: 



Figure 12. Simplified Rigid Body System with Phase Plane Modeled as PD/Relay Combination 


The closed loop transfer function for this system with unity feedback is: 
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The following stability condition is derived from Routh’s Stability Criterion. We will consider this condition 
sufficient, but not necessary, for stability due to the inherent conservatism when using a describing function to model 
a phase plane controller. 


1 _ ^d_ _ a c Tp + a c Tp > q 

RL 8 tz(rL f 2 tt{RL)S 


Hence, for stability, given a vehicle’s control acceleration (a c ), latency (7b), and desire attitude rate limit (RL), the 
deadband must be greater than the value shown in equation 7. 
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T a cL> 
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Or likewise, for stability, given a vehicle’s control acceleration (a c ), desired deadband (8), and desired attitude rate 
limit (RL), the latency must be less than the value shown in equation 8. 
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Example: Pitch Phase Plane Control with On-Orbit Vehicle 


In this phase plane example, the above analytical derivation using describing functions shows a control system 
robustness for delays up to 3.29 seconds. Actual time domain simulation shows a delay of 3.5 seconds does indeed 
result in phase plane rigid body instability (Figure 13). 



Figure 13: Time domain Simulation Showing Good Agreement with Rigid Body Margin Predicted by 
Describing Function Representation of Phase plane. Unstable control (right) with 3.5 second latency. 


Filter Design to Ensure Stability of a Phase Plane Control System 

A key design challenge in developing the on-orbit flight control software is the development of the software 
filtering to ensure control system stability. Four design consideration for developing these filters are summarized 
below. 

Key Filter Design 1 : Rigid body Stability 
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A principal concern with space vehicle rigid body stability is adequate margin to accommodate system latencies, 
which is measured in the form of available phase margin. The above analytical solution for allowable latency is 
derived for the simple system in Figure 12, however analytical solutions are not so available when higher order 
dynamics are added to the plant or high-order filters are added to attenuate noise and vehicle flex dynamics. Margin 
to system latencies can be computed graphically by determining the frequency of the rigid body cross-over point in 
the Nichols Plot (Figure 14). Allowable latency is easily computed from the relationship between time delay (Td) and 
rigid body phase margin (Or): 


nichols of linear system, number of modes: 47 



Figure 14. Graphically Determining Allowable Latency (Td) Given Rigid Body Phase Margin ( Or) and 
Rigid Body Cross-Over Frequency 


T d ( sec)< 


0 R (deg) -180 
(360 deg )co CR (Hz) 


195-180 

360*0.0167 


2.5 seconds 


Another key aspect for rigid body stability is to ensure the capability to estimate the frequency content associated 
with the gyroscopic torques in the nonlinear rigid body dynamics (equation 1). This is accomplished by ensuring the 
system phase lag associated with gyroscopic torques, which is defined by omega in Equation 2 for a vehicle with 
inertial symmetry, is small, say no more than 90 degrees. Note this frequency, for a vehicle with inertial symmetry, 
is proportional to the rotational rate about that axis of symmetry, hence can limit the peak allowable value of 
commanded rotation rate. 

Key Filter Design Principal 2: Flex Gain Margins 

Flex corruption in the measured sensor content can drive an RCS system unstable. Typically this instability 
manifests itself in the form of continuous rate-limit limit cycles, as shown in Figure 15. Less common, attitude limit 
cycle instabilities are feasible as well, and can be experienced with operations requiring tight attitude control. RCS 
stability is generally achieved by filtering of the rate sensor data, and likely the attitude data is well. Shaping of the 
commanded thruster firing frequency content, say through command shaping (Section IV), is an alternative approach 
to minimize flex amplitude (and gain confidence in stability) but generally less common due to concern with 
robustness. 
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Figure 15. Phase Plane Flex Induced Instability, Colors Denote Firing Command Directions: Green = -1, 
Blue = 0 (Off), Red = +1 


RCS stability given a flex environment can be demonstrated using the system linearized approaches described 
above, specifically using DF or PWM approaches to linearize the nonlinear phase plane in the system definition. This 
provides a sufficient condition for stability, and an initial design metric for corresponding filter design. Flex modal 
frequencies are typically much higher in frequency than the rigid body frequencies of concern, hence the flex modes 
are targeted to be gain-stabilized, where the corresponding filters provide adequate attenuation to ensure stability. An 
example of stability margins are shown in Figure 1, where the flex mode attenuation meets the requirements from 
Table 1. In this figure, good correlation is noted when frequency response is computed via Pulse Width Modulation 
(PWM) vs. Describing Functions (DF). 


nichols of linear system, number of modes: 72 



Figure 16. Flex Body Stability Results: Adequate Flex Margins Demonstrated by both DF and PWM 
Approaches 
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When the flex modes are lower frequency, using the sufficient condition from DF or PWM may be too conservative 
to allow as a metric for filter design. This was typically the case for Space Shuttle on-orbit operations, for example 
for configurations where the Shuttle controlled the docked ISS configurations. Hence a less -conservative forcing 
function approach was utilized by Shuttle for these configurations, explained below. 

We will say it is necessary and sufficient for RCS flex mode stability if the peak flex excitation caused by a worst- 
case firing pattern does not exceed the rate limit value. For Shuttle application, this worse case firing pattern is 
defined as four bi-polar pulses occurring at the half-period of the flex mode of concern 5 . These four pulses physically 
represent the RCS correcting a rate error, then commanding a maneuver rate, then damping the maneuver rate, then 
performing a final rate correction. This forcing function criteria proves much less conservative than the previously 
mentioned DF or PWM approach, as shown in Figure 17 for a low frequency solar array flex mode. In this example, 
the solar array flex excitation fails the sufficient condition provided by the DF, but shows adequate margin when using 
the less-conservative forcing function approach. This four-pulse bi-polar forcing function was used in Shuttle/Station 


Roll Flex+rigid plant with filters, aa, PD control, control is: 0.667 0.2 



measured and filtered flex rate for 4 bi-polar ff axis: 1 rjc: -1 0 0 
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Figure 17. Stability Analysis shows Solar Array Flex Non-Compliance with DF-derived Sufficient 
Condition, but Adequate Margins Using less -Conservative Forcing Function Approach 

loads analysis as well to define peak structural loads due to RCS firings. 


The above approach for flex mode stabilization with RCS is generally available when the modal frequencies are 
separated in frequency (higher) from the rigid body modes to allow gain stabilization. If not, then phase stabilization 15 
may be necessary, where the designer must ensure that the system phase lag is sufficiently small at the modal 
frequencies to allow active suppression of any flex excitation. 

Key Filter Design Principal 3: Minimizing Filter Induced Lag 

Lag introduced by the bending filters can lead to poor knowledge of the actual rate during a thruster firing, resulting 
in phase plane overshoot and increased propellant consumption. This is illustrated in Figure 18, where filter induced 
lag results in completely overshooting the phase plane rate limit. To analyze this and develop a design criteria, we 
model the rate change during a thruster firing as a ramp 18 , and evaluate the filter lag response to the ramp input. 

We can analytically estimate the peak allowable filter lag (Tf), in seconds, which “break” the phase plane design: 

RL 

T F = other systemlags (9) 

This maps into a filter phase constraint as a function of frequency and provides a phase response requirement as 
shown in Figure 19: 
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allowable filter phaselag (deg) = T h (sec) * (freq in Hz) * 360 


( 10 ) 



Figure 18. Filter Induced Lag Results in Phase Plane Overshoot 
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Figure 19. Filter Phase Design Constraint for allowable filter lag of 0.2 seconds. 


Time Domain Simulation filter lag constraint from equation 10 maps well into propellant usage, where the latency 
magnitude defined by equation 9 does “break” the phase plane design and, at that point, results in significant propellant 
use. 
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Figure 20. Propellant Usage for Differing Filter Lag Times 


Key Filter Design Principal 4: Feed Forward during Thruster Firings 

As stated earlier, a key consideration when designing software filters for RCS control system stability is 
minimizing the filter-induced lag during thruster firings, as this lag can result in phase plane overshoot and 
significant propellant usage increase. An alternative approach to minimize this sensitivity, and allow a significant 
decrease in filtering bandwidth, is to feed-forward estimates of thruster acceleration during thruster firings. For the 
Space Shuttle, this allowed significantly lower bending filter bandwidth necessary to stabilize the control system 
with the very low frequencies associated with the docked ISS operations. Figure 21 shows a conceptual diagram of 
the Shuttle rate filter 16 , where thruster acceleration feed-forward was computed from the Initialization Load (I- 
Load) mass property values and then physically added to the rate during thruster firings. In this case, the filter 
converges of the error in the feed-forward estimate. 



Bending 

Filters 


Figure 21. Shuttle Conceptual Implementation of Rate Estimation Using Feed-Forward 
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RCS Off-axis Control During Powered Flight 

A typical role for RCS control is to provide roll control during single -engine powered flight, where the single- 
engine Thrust Vector Control (TVC) gimbal system can provide for control in the pitch and yaw axes, but not roll. 
For example, the Ares I-X vehicle used a single engine during ascent, hence roll control during ascent was provided 
by a separate RCS system using the phase plane in Figure 4. In this operation, the RCS system must be designed to 
accommodate the roll disturbance torques associated with the pitch/yaw TVC gimbal motion and other disturbance 
sources, as well as demonstrate RCS stability during the powered flight. We define a sufficient condition for RCS 
stability during powered flight: 

It is sufficient for roll RCS stability during single-engine TVC burns if the peak filtered roll rate for a worst 

case pitch/yaw TVC excitation is smaller than the phase plane rate limit. 

This above means that, even given the peak roll flex rate excitation at steady state due to the worst-case pitch (or 
yaw) TVC command, the roll axis phase plane will not respond. The process for generating this model is to define 
the Laplace Transform from the pitch (or yaw) TVC command to roll flex rate, and multiply it by the peak allowable 
gimbal command magnitude. This then physically represents the peak steady- state flex roll rate for the pitch (or yaw) 
gimbal sine- wave resonating the roll structural modes. If feasible from a standpoint of performance, roll bending 
filters can be designed to achieve this sufficient condition, with margin, hence demonstrating adequate stability. 



Figure 22. System of Roll Rate Response for Pitch/Yaw TVC Commanding 



Figure 23. System Producing Peak Steady State Roll Flex Rate Given Worst Case Pitch/Yaw TVC Input 


An example of this application is shown in Figure 24, where the peak steady state roll rate resulting from a four degree 
TVC excitation results in meeting the sufficient condition, i.e. the peak possible roll rate is within the phase plane rate 
limit. Note: Failing to meet this sufficient condition generally means higher fidelity analysis is needed as this sufficient 
condition is obviously conservative. 
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Figure 24. Example Showing Peak Steady State Flex Body Roll Rate within Phase Plane Rate Limit for a Peak 
Pitch/Yaw Gimbal Excitation 


IV. Jet Selection 

Jet Selection is the software algorithm used to determine which thrusters to fire given a command. The input 
command is commonly a rotational command vector, capturing the three degrees of freedom of rotational space 
(roll/pitch/yaw). For the Space Shuttle Primary Reaction Control System (PRCS) thrusters, this command could be 
six degrees of freedom, where the thruster selection would be required to accommodate a joint rotational/translational 
command. Generally a thruster selection software algorithm is a table-lookup scheme, which works well when the 
thruster configuration is orthonormal to the vehicle body axes, and where the range of anticipated vehicle mass 
properties is well known. The software for a table-lookup jet selection is not intensive for a configuration using a 
small number of thrusters, even when including logic for thruster failures. The Space Shuttle PRCS, using 38 thrusters 
to control six degrees of freedom, employed a complex table look-up algorithm using Boolean logic. For Space 
Shuttle rotational control, however, where a large range of mass property configurations were realized (ranging from 
payloads deployed on the Shuttle arm to configurations when docked to the International Space Station), multiple jet 
selection algorithms were examined. These included a jet selection to maximize angular acceleration given a 
command (“dot product jet select”), a jet selection to minimize acceleration error given a command (“minimum angle 
jet select”), a fuel-optimal jet selection, and jet selection employing load-limiting pre-shaping. These are discussed 
in more detail below. 

Space Shuttle Dot Product Jet Select 

The Space Shuttle Dot product jet selection algorithm chose up to three thruster given as input a desired 
rotational velocity increment (or acceleration) by taking the dot product of this three axis command with the rotational 
velocity increment (or acceleration) vector of each thruster. The thruster with the largest dot product magnitude is 
fired, and a second thruster is fired if it’s dot product magnitude if 50% of the first, and a third thruster is fired if its 
dot product magnitude is 40% of the first. The magnitude thresholds for the second and third thruster (50% and 40%) 
were variable by software gains (I-Loads), however rarely if ever changed. See Figure 25. 

Space Shuttle Minimum Angle Jet Select 

The Space Shuttle Minimum angle jet selection algorithm 18 chooses up to three thrusters given as input a 
desired rotational velocity increment (or acceleration) by minimizing the angle between this three axis command and 
the resulting rotational velocity increment (or acceleration). To minimize this angle, effectively minimizing undesired 
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cross-coupling, even thrusters that reduced overall resulting acceleration would be considered as a firing candidate, 
given a command, if it removed undesired off-axis acceleration. Minimal acceleration checks were included to ensure 
propellant efficiency 9 . See Figure 25. For configurations where the Shuttle was docked to the ISS, a very challenging 
control problem, the minimum angle jet select nearly always out-performed the dot product jet select. For those 
configurations, minimizing thruster cross -coupling and undesired off-axis accelerations (Minimum Angle Jet Select) 
proved more beneficial than maximizing resulting acceleration (Dot Product Jet Select). 


CMD 



Figure 25. Two Space Shuttle Jet Select Options for a Given Command (CMD): Dot Product Jet Select 
would choose Jet 1 and Jet 2, while Minimum Angle Jet Select would choose Jet 2 and Jet 4. 


Optimal Jet Select 

Jet selection algorithms to achieve a fuel-optimal firing pattern for a given rate command are available. The 
problem formulation 31 follows such that given a b vector whose elements are the desired rate changes for m degrees 
of freedom and a matrix Ajets whose columns are the accelerations of n jets, then the problem is to find the solution for 
thruster on-times (x) 

A jets = bx 

such that the cost function P, corresponding to propellant usage, is minimized. In this equation, c is the n- vector 
whose elements are the flow rates for the n individual thrusters. 

P = c T x 

Solutions to this problem can be found either with linear programming 17 or analytically 18 . See Reference 7 for 
a detailed summary of the latter derivation. One challenge to implementing an optimal jet selection algorithm with a 
phase plane controller is that a fundamental phase plane algorithm provides directional commands, not commanded 
rate change. An adaption of a phase plane controller to accommodate an optimal jet select rate command was provided 
by Kubiak 19 . 

Command PreShaping 

In many cases thruster firing patterns need to be constrained to minimize structural loading. Often referred to as 
‘command preshaping’, this is not a jet selection per say, but rather an approach to shape the thruster firing durations, 
and delays between firings, i.e, control the firing frequency content, to minimize structural loading. These approaches 
were used extensively for Space Shuttle RCS control during payload operations, notably when docked to the 
International Space Station. Options for command preshaping include targeting specific modes for suppression 20 , or 
a general solution minimizing power spectral density over a band of frequencies 21 . 

Vehicle Control Results with differing jet selects. 
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Figure 26. Vehicle Control Performance Results for Differencing Jet Select/Phase Plane Algorithms (Work not 
yet completed) 


V. Maneuver/Steering Algorithms 

Two primary categories of spacecraft maneuver algorithms are minimal time solutions and minimal fuel solutions. 
For commercial applications we concentrate on the latter, maneuver trajectories with propellant conservation as a key 
consideration, and this approach is addressed here. 

Eigen Axis Rotations 

The fundamental algorithm for a spacecraft maneuver is based on Euler’s Theorem, which states the general motion 
of a rigid body with one fixed point (specifically the center of mass), is a rotation about an axis through the point. The 

axis is the Eigen axis a e , derived from the error quaternion A e . This type of algorithm is fundamentally a two pulse 

bang-off-bang algorithm, where ideally only two firings are utilized, one to begin the rotation and one to end it. In 
application, however, many more thruster firings will occur during the intended “coast” between firings due to 
disturbances tending to drive the vehicle from the intended coast state. Generally the peak allowable maneuver rate 
is specified, (Om , and hence the commanded rotational rate for the maneuver is simply the desired maneuver rate 
projected onto the eigen (or Euler) axis a e (Reference 23). The eigen axis is recomputed each control cycle, and 
closed-loop control maintained during the maneuver. 

An eigen axis maneuver does not consider the environmental disturbances during the rotation, hence this 
simplification will result in a propellant penalty. 

Likewise the attitude error per axis can be determined by projecting the eigen angle ($>) onto the eigen axis a e . 

Variations off these basic calculations are typical to save propellant or increase performance, such as computing the 
desired attitude by propagating the commanded rate, or using knowledge of available control acceleration to better 
reflect anticipated rate error when building to peak commanded rate (a) n ), using knowledge of initial conditions and 
vehicle acceleration when computing the commanded axis 23 , including orbital rate when maneuvering with respect to 
a local (earth fixed) frame, etc. 

Torque-Free Rotations 

It was recognized early in spacecraft control research 24, 25 that propellant savings can be realized if the maneuver 
algorithm follows the natural “torque-free” trajectory from equation 2. With this approach, unlike an eigen axis 
rotation, the vehicle will (ideally) naturally coast to the desired attitude rather than fighting the environmental 
disturbances. Since a wide range of spacecraft vehicle has an axis of inertial symmetry, the equations of motion for 
these vehicles simplify further (equation 2). Despite the simple appearance of these equations, no analytical solution 
exists to derive initial body rate commands ( coo from equation 3) to coast “torque-free” to the desired attitude. The 
Russian MIR vehicle did however employ an approximate solution to these equations using a least squares solution 26 . 
A closed-form approximate solution to this torque-free problem has been derived which has been used to compare 
performance of this algorithm against the previously mentioned eigen axis algorithm (Figure 27). Generally, the 
torque-free trajectory will provide propellant savings over an eigen -axis rotation, however this depends of the initial 
conditions of the specific rotation and vehicle- specific control authority distribution between axes. Cost functions can 
be used to determine which of the two, eigen or torque-free, is the more propellant-efficient trajectory 27 . 
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Figure 27. Approximate Solution to the Commanded Maneuver Rates to Follow a Torque Free Trajectory, for 
vehicles with an axis of symmetry 


More complex algorithms are available which better utilize initial conditions by using more than two pulses 28 . A 
full optimal trajectory solution 28 which considers other environmental disturbances (gravity gradient, aerodynamic, 
etc) using pseudo spectral optimization has been demonstrated. The latter can provide significant propellant savings. 
For space operations where the attitude timelime is pre-defined, specifically for rotations where the initial and final 
boundary conditions (i.e. initial/final attitude and rotation rates) are known, this latter fuel-optimal trajectory can be 
computed a priori and off-line. 


Figure 28. Vehicle Control Performance Results for Differencing Automaneuver Algorithms (Work not yet 
completed) 


VI. Thruster Hardware Specifications 

RCS thruster configuration design for efficiency and controllability is well understood 31 . In addition, a trade 
can be performed based on redundancy requirements as a single fault-tolerant design can avoid the implementation of 
duplicate thruster at the cost of propellant usage. Depending on cost and mass implications either a duplicate thruster 
approach or a propellant impacting approach can prove viable. Basic thruster location and sizing assessments are 
interconnected and therefore generally lead to a torque -based requirement. In general, the thrusters should be located 
sufficiently far from the mass center of the vehicle at all points in flight. The thruster size and number is then linked 
to the resulting moment arm, vehicle inertia, expected disturbance torques, and maneuvering requirements. 
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From a GN&C perspective, RCS capability can be specified based on minimum and maximum torque capability 
rather than a specific number of thrusters with specific locations and orientations. This allows hardware designers to 
design the system based on availability of hardware, available space on the vehicle, and other mechanical design 
considerations. 

A Space Shuttle heritage criteria can be applied for defining acceptable control authority of an RCS system. This 
design criteria requires the control torque to exceed all known disturbance torques by a factor of two. From the 
rotational equations of motion (equation 1), this criteria is written as: 


> 2 * 


max 


(- OJ x Jco) 


+ max 



where T c is the control torque, co is the body rate, J is he inertia tensor, and T ex t is the summation of external disturbance 
torques. Worst case values are computed for each term and summed together to generate a peak disturbance value. 
Note the gyroscopic coupling effect from the Euler equations of motion is represented is a function of the desired 
rotational maneuver rate, meaning (obviously) if higher maneuver rates are desired, larger control authority is required. 
Disturbances to consider are generally a function of the orbit and attitude. For LEO orbits, gravity gradient is often 
the primary environmental disturbance torque. Time domain simulation can also be used to show controllability of the 
vehicle with an RCS. The time domain simulation should have sufficient fidelity to model vehicle dynamics, expected 
maneuvers, and known disturbances. If the control authority of the RCS is marginal, the commanded vehicle maneuver 
rates can be reduced so as to reduce the gyroscopic effect. Likewise, limiting to only single axis maneuvers can aid in 
controllability for the same reason. 

While control authority is the primary concern for making sure the RCS is sized large enough, the design must 
also be assessed to ensure the desired control precision can be achieved. Control precision is impacted by both thruster 
force and minimum thruster on-time. Time domain simulation can be employed using vehicle conditions when the 
control authority is the greatest. Trades can be assessed based on pointing accuracy and the resulting duty cycle to 
ensure that the fine control of the vehicle is sufficient. System delays and latency are important when assessing time 
domain results for such purposes. If control accelerations are too great, propellant usage and limit cycling can be 
adversely impacted. Figure XX. 1 shows an example of this sensitivity to key parameters. These results are based on 
time domain simulation using the same number of thrusters in the same locations/orientations but varying the thruster 
force magnitude. These results were generated for both a nominal and failed thruster scenario and show an optimal 
thruster size based on total impulse and therefore RCS propellant usage. It is also worth noting that for lower thrust 
jets, the On/Off count rises significantly. However, adding hysteresis to the phase plane design can reduce this effect 
as shown in the figure. 
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Figure 29. Time Domain Simulation Showing Sensitivity of Total Thruster Impulse and On/Off Count to 
Thruster Force Size 
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VII. Summary 

A summary of key principles for the design and stability determination of a spacecraft on-orbit attitude control 
system employing constant-thrust on-off Reaction Control System (RCS) thrusters has been presented. Drawing 
primarily from Space Shuttle and Space Station program experience, insight and design principles for control system 
hardware performance requirements, control system software algorithms, and software filter design to 
ensure/demonstrate adequate control system performance and stability have been provided. A new approach to 
develop a linear representation of a phase plane controller was derived and demonstrated. Topics addressed included 
thruster hardware specification, phase plane design and stability, jet selection approaches, filter design metrics, and 
auto maneuver logic. An approach to using Describing Functions to linearize a system modeling a nonlinear phase 
plane algorithm has been described, and consistency with time domain nonlinear simulation has been demonstrated. 
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